Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
b28c5950db86fc9e47ced034763c87c361b8788928b28c25bdbe12c60302d82c.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
b28c5950db86fc9e47ced034763c87c361b8788928b28c25bdbe12c60302d82c.exe
Resource
win10v2004-20230220-en
Target
b28c5950db86fc9e47ced034763c87c361b8788928b28c25bdbe12c60302d82c
Size
5.6MB
MD5
737192890f93c592f505d4006e2f3df5
SHA1
93702123f05f3d689bdf0ced4c0254a8eaf2b4c2
SHA256
b28c5950db86fc9e47ced034763c87c361b8788928b28c25bdbe12c60302d82c
SHA512
23786c971873556e783ebc0bfc0a3da3550a7f34b12c3474dc57dcbc7632df778e8a33f99a3e3170eda1d43b8d48baad7f439cdb64f953d27a5715d4d6751499
SSDEEP
98304:gc0vWo4c8OUiP+h71YLveNXBA7Wni8vwoTMMVThfhmQt+xhM0hlGUsiH:2vW5OU8+J1y7Qvw0MMpFt+xC0WViH
resource | yara_rule |
---|---|
sample | vmprotect |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
\��/�����҃g�s��j¦�_/�#����ӬwWZ10����G�� }4����B� �4��T����(�җ����y/����o�&NO����/!H���ϧV<tɠ"�ݹ�^@���Z�T�I��7� �;�K���>íruI1q����6�/�L��XROb\�~d�J���`���*�?L�ܩq�W!�!&�� ���Ʀ��cg���J�A�X�A���g>r��~��ʗK����T�t�`��fI�o�'X/������쌫u���t�M6 S�ͬ��ɲA�L` D��Ԉf�X�FEj�`�?y�H3��&�)��5�f��\m7�_�_&�gq�ӣ�|����,q�e��EW��N]&�:�AI#B�9^�1QLc��yC�Yݹ`�!0� GQ'5H-۞����>dYYd���.�-��35�����o�9�;���m�;���s��Oׅ�cفҟ��9-[/�c#������$����.*���\zam����s�����:��먺�x�k�e���&6�z7��i�d����x�� ���6mVj�gk�ܛ�챃=ZŒ����`�\�t��xĵA3CڮSXs�����k_�4�j ׃M&��� �1��`�K�\��>��oXa�k$�e��b�N�[⟛2��P��IA�a⠺�-��jmq oE�ʍ�+������o;�x��LT��܈�� ��W�y�����U�0N� %[�, �J �},���� G:pC>�,r���`�E�!ɣG��)��!��٠4�}�a��j���fP��a-W1㿮���6-aeaP hL�7 �`!p����Ũ�q�ߪ.lk^f�O��J����;��N"0�n�� v$F��x�;&\T� ��J�ބ�h�7 y�_��%��)����=S8o�c���i�p-5`�9o�x�I���/e�&� \�t�2��y����))L8P��1�s�>� .8�$�u�� g?�ܜ�����"��t�+���V�������k��m��G�o�)�#�yP�Kտ���(�S�V0Ѐ�tr�k���:N�# ���Ɣ����o< ��x�i>����4�܂=VP�\bL R���1�{K$�i�V��be��\����ף�N2F��&&�9S��n�4A�6)�7__3����%G ��G�'n 2��y���p ��mß�G>��.R֢&��<Lk��Nqg�ٚ���H� �)"�7h���M$l��z=��'�zBt���W�����5Dc��Ų�Sv294p'�£�8Dž���O�tY/H�P$�j�{4I������"j�q;K �Jy bk����&wz�>di��DCS�O)P��Ѽ��n�ާ`}�����>�|H{eJ�P�uK�(���n�>�ic���<�PD������~̇��u�N1��@[?c��fn����VF�����I����Sx�H.kO2��l!)�_{T�s����z�P��+� ����F��r!�=w>L�}��a LU���k�����Z��C�Ǫ�gAtGS��>���_;����|F!)v�]B���7����A�X]�����ѽq�{G9�g�]���K��Y��xKN��T�Jٞ�/��;�C!:N]�KDl��j �(I��C]�KK�]�#���d63��v�!��=YbOU�VF��JI�l䃈Ze���9hz�(~Lm4�.��`��3�� gf+Ń�ɾz���zK#�*�P��l �C)Kκ ?��|��� ��Z5F�R���[@��,���<�*��ؗ8�Xs��X{����Be��e�A�=6p(t4^O�H��A�d �5�>�`Ƭ5ʹ&wً��bH��o��]���dS$8�f�OM�X��r�:�l".'q�|�t�������XP��[�t�$_��&��i�2u��(�L��mx�oH���1�KhR�!FP�{�}���BV$��^)}�&��Q�J�m�U����)�T����l�0@�0\gI��<v��u�6����G�2:���r{|@D�6vg��\��^a�\�*+e��jVl���4�i�� h�OK����qc���^���Y����%�� ��<d^��W�E�����)N��<��EZ2�Y�%�i�,,�?u�]!QA J��'!W<�M�.�����b,��Y.9��l%�ı���$n7�p9�^��D� � 0SPRC*g"�F46�G�"/u�;E-���N�:��~�F�9��.m`'� =��_ `X�yE��rk��"+4K�u $��n)�?#e"�w)������y�O%�H7�,���ŌB� 2?A���.����(���� c��`����z��n)�mMaX�Y�������4���6�m}�l7��i��Ca�{��� #!6�?a�w�i��Q8��f�_Y�w���.0OT��D��a��� 7w� �Ĕ�r�>nCW�>N�{KQC��gÑ�d����IZp��:�J8���a�9�����چ��<T^�%:ϟt2 ���;�����E�*>{̄XV楮 |[��K���q��a�:];�L�s����'���hR4#߁����H-���h�۱�����]��v��@(�J}y�bpՌx��mE�N�a�a(T�uU'f}k#ɰ�x��2NM:��) )g�S�K�S�����h�����;��e��%fC4����ou��qQl�)��Q��z��H�EWSW��w�#\�o$���:����'�%�K=�%��w-�D�&4ݐ���) Zi�RM��y�Gi �'8_m��?emKLm��N6m.�,^�Nꕘ0c4��VZӾ5 �@���R��q�5�����%i�=D�� �`Y~��F'����6���信�;��>���]��CwL��Y��4� �1�*�)��pf��v()��D�ߺ��G�o��:|8F.�,�-�=��4�L��>ﴐ༈M .pF*Qg�fR���6��$����V��7�-aC�K��ܻD�'��T�ҡV��Osy%�"W�e�De�h���pYs����b�w���U^N���s���?V���qr���K��V��ڠ1�5˄�b��[����{ �
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE